Artificial Intelligence (AI)
September 2026
September 2026
Vol. 9, Iss. 38
Robin’s Newsletter #431
US authorities board vessels to check for cyber compromise. Google says Gemini kinda did crimes. US Treasury Sec says AI labs should be held liable.
Vol. 9, Iss. 37
Robin’s Newsletter #430
ID Scan source of 150 million stolen drivers' licenses. Peers propose personal liability in CSRB. Apple introduces 'audio intelligence' feature.
Vol. 9, Iss. 36
Robin’s Newsletter #429
Anthropic admits it relied on a 'single layer' of security. Potentially huge breach of US ID verification biz. US launches pilot water cyber scheme.
August 2026
August 2026
Vol. 9, Iss. 35
Robin’s Newsletter #428
UK gov giving itself powers to secretly block foreign tech. Alabama opens investigation into OpenAI hacking. Manchester Airport Group data breach.
Vol. 9, Iss. 34
Robin’s Newsletter #427
Small UK power plant shutdown by Iranian group. AI firms promise better segregation, monitoring. 3.7M people affected by US health records breach.
July 2026
July 2026
Vol. 9, Iss. 28
Robin’s Newsletter #421
Accenture tight-lipped on 'isolated matter'. Linux VM escape vuln. HalluSquatting and Ghostcommit tactics used against AI agents.
Vol. 9, Iss. 27
Robin’s Newsletter #420
Antrhopic models available agin, while others can be used to create ransomware. EU-US data transfers in jeopardy following Supreme Court ruling.
June 2026
June 2026
Vol. 9, Iss. 26
Robin’s Newsletter #419
Five Eyes urge cyber resilience focus. TfL Scattered Spider duo make guilty plea. Chinese firm unveils 'Mythos' level model.
Vol. 9, Iss. 25
Robin’s Newsletter #418
FIFA agent account caught offside. Upto half of Fortinet firewall credentials appear to have been compromised. 'Fix this code' is a jailbreak?
Vol. 9, Iss. 24
Robin’s Newsletter #417
Claude access restrited. Microsoft repos compromised for second time in as many weeks. OpenClaw is average at phishing emails.
Vol. 9, Iss. 23
Robin’s Newsletter #416
Meta chatbot allowed Instagram account takeover. Anthropic expands Mythos access. Open source models used to create self-propagating, evolving malware
May 2026
May 2026
Vol. 9, Iss. 20
Robin’s Newsletter #413
BitLocker encryption busted, OpenAI announces Daybreak, and UK Gov signals Computer Misuse reform.
Vol. 9, Iss. 19
Robin’s Newsletter #412
CISA says CNI must be ready for isolated operation. Mozilla's Mythos musings. Poor authorisation is Claude's Chrome extension.
Vol. 9, Iss. 18
Robin’s Newsletter #411
Cyber Security Breaches Survey 25/26 shows long way to go for UK biz. OpenAI matches Anthropic in cyber tests. CopyFail affects all Loinux distros.
April 2026
April 2026
Vol. 9, Iss. 16
Robin’s Newsletter #409
UK Gov send open letter to companies on AI cyber threat. Virginia bans sale of precise geolocation data. No honour amongst thieves.
Vol. 9, Iss. 15
Robin’s Newsletter #408
Mythos madness. Russian DNS hijacking. US warns energy, water, of Iranian threat actors.
Vol. 9, Iss. 14
Robin’s Newsletter #407
Anthropic's source code leak. North Korea compromises popular JS library. What does Rowhammer mean for Nvidia GPUs in AI workloads?
March 2026
March 2026
Vol. 9, Iss. 13
Robin’s Newsletter #406
TeamPCP software supply-chain attacks widen, target Iran with crude wiper. US bans foreign-made routers. FBI director Kash Patel email's compromised.
Vol. 9, Iss. 9
Robin’s Newsletter #402
7,000 strong robo vacuum drone army. AI distillation attacks, copyright claims, and issues abound. Perfect 10 Cisco SD-WAN vuln.
February 2026
February 2026
Vol. 9, Iss. 8
Robin’s Newsletter #401
UK gov cyber campgin. Copilot ignored email DLP flags. Don't use LLMs to generate passwords.
January 2026
January 2026
Vol. 9, Iss. 4
Robin’s Newsletter #397
VoidLink malware written by AI? Microsoft handed over BitLocker keys to the FBI. A doozey of a Telnet bug.
Vol. 9, Iss. 3
Robin’s Newsletter #396
Poland ‘came close’ to grid blackout, Dutch port hacker sentenced, and Signal... but make it AI
Vol. 9, Iss. 1
Robin’s Newsletter #394
Ransomware attack against Romania's water agency. MongoDB vulnerability being exploited. Browser extensions for corporate espionage?
November 2025
November 2025
Vol. 8, Iss. 45
Robin’s Newsletter #387
AI-powered cyber-espionage campaigns, JLR incident impacts UK GDP, Cyber Security and Resilience Bill unveiled.
Vol. 8, Iss. 45
Robin’s Newsletter #386
Overblown AI malware hype. Rogue cyber security pros moonlighting as ransomware affiliates. Meta profiteering from scammers.
October 2025
October 2025
Vol. 8, Iss. 43
Robin’s Newsletter #384
AWS outage knocks out thousands of customers; JLR incident estimated to cost UK economy £1.9B; ICO decided not to investigate MOD Afghan breach.
Vol. 8, Iss. 41
Robin’s Newsletter #382
Discord data breach includes government ID verification info. It's trivilially easy to influence an LLM. JLR restarts operations.
September 2025
September 2025
Vol. 8, Iss. 39
Robin’s Newsletter #380
JLR secures line of credit for supply chain. US Secret Service uncovers 100,000 SIM farm. NCA arrests man in Collins Aerospace attack.
Vol. 8, Iss. 36
Robin’s Newsletter #377
JLR production disruption. Anthropic's $1.5B settlement. Sainbury's using live facial recognition.
August 2025
August 2025
Vol. 8, Iss. 35
Robin’s Newsletter #376
Salt Typhoon comp'd over 200 organisations. Anthropic says cybercrims run ransomware ops using Claude. SK Telecom lacked pretty much any security.
Vol. 8, Iss. 34
Robin’s Newsletter #375
US intel chief says UK walking back E2EE backdoor (for US citizens?) Interpol arrests 1,200 in African cybercrime crackdown. Accenture to acquire CyberCX.
July 2025
July 2025
Vol. 8, Iss. 30
Robin’s Newsletter #371
SharePoint shells for China. Clorox's $380M help desk lawsuit. And massive surges in UK VPN signups following Online Safety Act checks come into effect.
May 2025
May 2025
Vol. 8, Iss. 21
Robin’s Newsletter #362
Global infostealer, ransomware infrastrucutre takedown. TCS investigating role in M&S incident. Anthropic's AI blackmails developer in test.
March 2025
March 2025
Vol. 8, Iss. 12
Robin’s Newsletter #353
Alphabet to buy Wiz for $32B. Oracle denies cloud platform compromise. Clearview AI class action lawsuit grants plaintiffs company stake.
February 2025
February 2025
Vol. 8, Iss. 5
Robin’s Newsletter #346
DeepSeek buzz, bans, breaches. NAO says UK gov won't achieve 2025 cyber pledge.
January 2025
January 2025
Vol. 8, Iss. 1
Robin’s Newsletter #342
UN approves cybercrime convention. Clop threatens Cleo breach names. Sanctions for Chinese firm links to Flax Typhoon. Doom as a CAPTCHA.
December 2024
December 2024
Vol. 7, Iss. 51
Robin’s Newsletter #340
US considering TP-Link ban. Nebraska sues Change Healthcare. False Claims Act whistleblowers.
October 2024
October 2024
Vol. 7, Iss. 40
Robin’s Newsletter #329
LockBit arrests. Evil Corp linked to Russian intelligence. Meta Ray Bans used in creepy facial recognition concept.
August 2024
August 2024
Vol. 7, Iss. 33
Robin’s Newsletter #322
Large data set published from US Data broker. Trump campaign blames Iran for leaked emails. Critical zero-click TCP/IP vulnerability in Windows.
July 2024
July 2024
Vol. 7, Iss. 27
Robin’s Newsletter #316
Unauthenticated RCE in OpenSSH. ShinyHunters release phone numbers of 33 million Authy users. Japan wins the 'war' on floppy disks.
April 2024
April 2024
Vol. 7, Iss. 16
Robin’s Newsletter #305
Significant breach at data analytics firm Sisense. UK trade unions targeted. Perfect 10 vulnerability in Palo's GlobalProtect VPN product.
March 2024
March 2024
Vol. 7, Iss. 13
Robin’s Newsletter #302
Open-source project compromised to allow SSH backdoor. UK, US accuse China of targeting politicians. Facebook AiTM'd users to spy on Snapchat usage.
Vol. 7, Iss. 10
Robin’s Newsletter #299
ALPHV pulls an exit scam after Change Healthcare seems to make ransom payment.
December 2023
December 2023
Vol. 6, Iss. 49
Robin’s Newsletter #285
Iranian attack on US water facility. Chinese espionage group in Netherlands chip maker for years. US
November 2023
November 2023
Vol. 6, Iss. 45
Robin’s Newsletter #281
SEC charges SolarWinds CISO. Countries vow not to pay ransomware demands. Major updates to CVSS.
October 2023
October 2023
Vol. 6, Iss. 40
Robin’s Newsletter #276
Ukraine says Russia is going after war crimes data. US, Japan says China targeting routers for persistence. UK logistics firm goes under following ransomware attack.
August 2023
August 2023
Vol. 6, Iss. 34
Robin’s Newsletter #270
The importance of using representative test data. Another UK police breach. Critical vulnerabilities in Citrix, Ivanti and WinRAR products.
Vol. 6, Iss. 33
Robin’s Newsletter #269
UK Elections watchdog comopromsed two years ago. Detials of Northern Ireland police staff accidentally published. Zoom backtracks on AI training in terms of service.
July 2023
July 2023
Vol. 6, Iss. 29
Robin’s Newsletter #265
EU and US adopt new privacy framework for personal data transfers. Microsoft email systems breached by Chinese APT group. Poisoned AI models and disinformation.
Vol. 6, Iss. 28
Robin’s Newsletter #264
Japan's busiest port halted by ransomware. Academics write open letter over Online Safety Bill concerns. JumpCloud resets API keys.
June 2023
June 2023
Vol. 6, Iss. 25
Robin’s Newsletter #261
More MOVEit victims and a $10 million bounty on Clop. Fortinet VPN vulnerability. A couple of cool side-channel techniques.
May 2023
May 2023
Vol. 6, Iss. 19
Robin’s Newsletter #255
The figurative and literal jury is in on SolarWinds, Merck's NotPetya claim, Uber's data breach cover-up.
April 2023
April 2023
Vol. 6, Iss. 18
Robin’s Newsletter #254
RSA Conference 2023 takeaways. Data-driven decision making. IoT and Digital Services legislation.
Vol. 6, Iss. 15
Robin’s Newsletter #251
Genesis Market seizure leads to 119 arrests. The UK on being a responsible cyber power. Security and privacy risks of AI chatbots.
February 2023
February 2023
Vol. 6, Iss. 9
Robin’s Newsletter #245
USSOCCOM Email server left exposed. Critical vulnerability in another file transfer app. Signal says it would exit UK market.
Vol. 6, Iss. 7
Robin’s Newsletter #243
Sanctions for TrickBot as ransomware declared tier 1 national security risk. Hacking ChatGPT with prompt injection attacks. ESXiArgs ransomare spree continues. Dutch police bring down Exclu encrypted phone service.
January 2023
January 2023
Vol. 6, Iss. 3
Robin’s Newsletter #239
LastPass silent on breach. Royal Mail ransomware attack. FAA system outage grounds flights. Exfiltrating data from Google Sheets.
December 2022
December 2022
Vol. 5, Iss. 50
Robin’s Newsletter #234
Apple offers encrypted iCloud backups. Medibank takes ysstems offline for security improvements. Attack on NZ MSP affects Justice and health bodies.
October 2022
October 2022
Vol. 5, Iss. 41
Robin’s Newsletter #225
Ex-Uber CSO found guilty of obstructing justice. Microsoft is botching 'ProxyNotShell' Exchange vulnerabilities. Australian man arrested in connection with Optus breach.
September 2022
September 2022
Vol. 5, Iss. 38
Robin’s Newsletter #222
Welcome to 2022: Uber comprehensively owned via hardcoded PAM credentials, IHG password vault alleged secured using 'Qwerty1234'.
March 2021
March 2021
Vol. 4, Iss. 10
Robin’s Newsletter #142
Hafnium mass-exploitation of Microsoft Exchange servers. Google, Alliaz and MunichRe team up on cloud cyber insurance. Bitflipping may be more common than you think.
June 2020
June 2020
Vol. 3, Iss. 24
Robins Newsletter #104
Snowstorm in a Dark Basin: Citizen Lab, MDR Cyber shine light on hackers for hire. Babylon Health breach and lessons from Apple, Amazon, and Google. How far do you go to protect against cyber-harm on your platform?